Privacy Policy

For website data (contact form and browsing), SUM8 is the controller.

In ASCENT, the client company is the controller of its own accounts and customer data. SUM8 processes that data on the client's behalf, only to provide the contracted service.

Data protection officer: Lucas Branco Pulla, lucas@sum8.com.br.

• What you type in the form: name, email, company, WhatsApp number, interest and message.
• Visit source: page, referring site and campaign parameters (UTM).
• Browsing data through Google Analytics and Meta Pixel cookies, to measure visits and ads.

When you connect through Facebook Login for Business, Meta shows the permissions ASCENT requests and you choose which assets to share. With your authorization, we receive:

• Your Facebook user ID, name and an access token.
• The list of business portfolios, ad accounts and Pages you authorized.
• From authorized ad accounts: campaigns, ad sets, ads, creatives, audiences, budgets, performance metrics and spend.
• From authorized Pages: name, ID and engagement metrics.

If you also connect other tools, we receive what each one shares: Google Ads and Google Analytics metrics, store orders (amount, date, sale source and a hashed marker of the email or tax ID to tell whether the customer is new, without storing the email or tax ID itself) and the contacts your team adds to the ASCENT CRM.

We never ask for or store your Facebook password.

• Show your marketing performance in ASCENT.
• Generate recommendations on campaigns, budget, creatives and audiences.
• Make the changes you approve in your ad accounts, or the ones you allowed ASCENT to make on its own within the rules you set.
• Measure the result of each change and show it on the scoreboard.
• Send alerts about your account by WhatsApp or email.
• Provide support, keep the service secure and meet legal obligations.

We do not sell data. We do not use one client's data for another client. We do not use data received from Meta to advertise SUM8 or to build profiles of people.

ASCENT uses the Anthropic API (Claude models) to analyze performance and write recommendations. We send metrics, campaign names and business context, never access tokens. Under Anthropic's commercial terms, data sent through the API is not used to train its models.

Only with the providers that make the service work, each limited to what it needs:

• Hostinger: server where ASCENT runs and stores data (United States).
• Anthropic: AI analysis (United States).
• Vercel: website hosting (United States).
• Google and Meta: website visit and ad measurement.

We may also disclose data to authorities when required by law.

Some providers are in the United States. Transfers follow article 33 of Brazil's data protection law (LGPD), with providers that offer contractual data protection safeguards.

• ASCENT data: while the contract is active.
• Meta access token: until you disconnect. It is deleted immediately when you do.
• After a deletion request or the end of the contract: deleted within 30 days. Backups rotate and expire within 14 days.
• Website form contacts: up to 2 years after the last contact.
• Anything the law requires us to keep (such as tax records) stays for the legal period.

Connections always use HTTPS. Tokens and keys stay on the server, with restricted access, and are never shown on screen. ASCENT requires login and each client sees only its own data.

Under the LGPD you may ask at any time for: confirmation that we process your data, access, correction, anonymization, portability, deletion, information about who we share it with, and withdrawal of consent.

Send your request to lucas@sum8.com.br. We reply within 15 days.

• In ASCENT: Connections → Meta → Disconnect.
• On Facebook: Settings & privacy → Settings → Business integrations → remove "ASCENT by SUM8".

When you remove it on Facebook, Meta notifies us and we delete the token and the data received from Meta. Full steps are on the data deletion page.

ASCENT is a business service and is not intended for anyone under 18.

When we change something important, we update the date at the top and notify ASCENT clients.